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Aruba Networks, a provider of wireless LANs and secure unified 
nx)bility solutions, announced that Chi o W&sl eyan University has selected 
and comTBnced deployment of Aruba 's 802. 11n adaptive wireless LANs across 
its Delaware, Chi o, canpus. 

Chi o Wfesl eyan University is... 

... 1 1 s canpus. The wireless network will consist of redundant centralized 
l\/l\/C-6000 IVLiI 1 1 -Servi ce MDbility Oont rollers and mjre than 400 Aruba 
AP-124 and AP-125 802. 11n access points spread across 50 acadeni c, 
adrri nl St r at I ve , athletic, and resi dent 1 al facilities. The AP-124 access 
poi nt s wi I I be used wi t h r enx)t e ant ennas t o pr ovi de wi r el ess cover age 
out doors. 

"Chi o. . . 
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Aruba Networks, for exanpl e, is delivering both new hardware and 
software with this goal in m nd. . . 

. . . new 1 nnovat 1 ve f eat ur es: f 1 r st , t hey' r e upgr adeabi e t o 802. 1 1n vi a a 
software upgrade. Second, Aruba 's management technology enables 
adrri nl St r at or s to configure the APs to act not just as access 
gateways for vureless clients, but intrusion detection devices or as nodes 
1 n a secure wi rel ess mesh network. 

The APs new software allows them to be turned into vJnat Aruba 
cal I s mobi I e r emot e access poi nt s, meani ng t hey' re abl e to est abl 1 sh a VPN 
I PSec tunnel back t o t he control switch 1 n t he data center. A nice touch 
her e is t he sof t war e al so 1 ncl udes a spl 1 1 1 er . . . I ooki ng t o depi oy 802. 1 1 n 
over time," sayi d IVI chael Tennefoss, head of strategic marketing at Aruba 

Aruba has done hard work in pricing these devices, he claims, such 
t hat even wi t h a. . . 

...they'll be charged an additional fee, the amount of \Mii ch is 
vol ume- based. 

Additionally, Aruba has 
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can really hope to accorrpl i sh with each of t heni " said Peter 
Thornycroft, author of the Aruba white paper. "I start wi t h t he theory of 
operation, explain the letter and spirit of between access points were 
cent r al I y managed . Wiat was true in t he eel I ul ar wor I d was f ound al so to 
be t r ue in t he. . . 

. . . one consi ders t he wor I d' s I argest ™ rel ess LAN depi oyment s - - t hose i n 
which all of the access points are rmnaged from a central 
controller -- they are all adaptive mil 1 1 - channel networks," said Keerti 
IVbl kot e, Aruba 's founder and head of products and partnerships. "The 
reason 1 s because usi ng nul t i pi e channel s. . . 



13/3, K/ 4 (Item4 fromf i le: 275) 
Dl ALOG( R) Fi I e 275: C^l e Q-oup Gonput er CB(JN) 
(c) 2008 The Qal e Q-oup. All rts. reserv. 

03376136 SUPPLI ER NUIVBER: 176373198 (USE FORIVAT 7 OR 9 FCR FULL TEXT 

AirV&ve W rel ess ^^nagerTent Suite Version 5.3 expands options for W.AN 
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expands the depth and breadth of AirV\6ve's support for wireless 
infrastructure products fromOsco, Aruba , l\^ru. Trapeze, Tropos, 
ProCurve, and other leading enterprise W.AN, mesh, and W M'OC vendor s. 
Al rVteve 5. . . 

...nigration by assessing wliere network utilization is approaching 
capacity. Q her new features include global device configuration 
tenplates, enhanced rogue access point detection, and integrated 
mjnltorlng of routers and switches . 

"The Ai rV\feve 5.3 software reduces our support costs and el 1 n1 nat es 
management headaches by maki ng. . . 
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expands the depth and breadth of AirV\6ve's support for wireless 
infrastructure products from Q sco, Aruba , IVbru, Trapeze, Tropos, 
ProCurve and other enterprise W./\N, mesh, and Wl\^ vendors. /\i rV\6ve 5.3... 

...nigration by assessing where network utilization is approaching 
capacity. Q her new features include global device configuration 
tenplates, enhanced rogue access point detection, and integrated 
monitoring of routers and switches . 

"The /\i rVteve 5.3 software reduces our support costs and el ini nates 
management headaches by maki ng. . . 
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in wireiess systems to date, the Trapeze NonStop W r el ess( TM) 
network and its enabling Virtual Oont roller Ouster technology. This 
t echnol ogy del 1 vers Oont rol I er Vi r t ual 1 zat 1 on \«hi ch dr amat 1 cal I y 1 npr oves 
t he over al I r el 1 abi I 1 t y of t he. . . 

. . . det erni nes the appropriate placement of access points, accurately 
predicts RF coverage, and automatically pushes the configuration to each 
controller and access point as 1 t is added to the network. 

In order to make RnglVbster even si npl er for network managers to 
install and scale, last month Trapeze announced a turnkey integrated 
wireless management solution intheformof a pr e- conf i gur ed appi i ance, the 
FM 200, t hat can rranage as many as 5, 000 access pol nt s . 

The FM200 conbi nes the latest software version of RnglVbster wi t h a 
rack- rrount hardware... 

...to larger and larger deployments si npl y by purchasing and dovwil oadi ng 
license keys for enabling the rmnagerrent of additional access points . 
This saves hundreds of IT hours over configuring a generic server. 
Highest Performance Controller Supports 12, 000 Q lent s 
The Mibiiity Exchange l\^-2800 is Trapeze Networks' next generation, 
high capacity W.AN controfler . Wth 28 Gbps of swtching, more than four 
1 1 nBS faster than the closest conpetitor, it i s t he highest performance 
controller available. The l\/X-2800 supports up to 12,000 active client 
devices for larger depi oymsnt s. . . 

...found in higher education and mil t i - f aci I 1 t y healthcare, and 
automatically expands using Trapeze's Virtual Control I er Ouster 
technology for up to 64 units, meaning that IT staff only manage one 
vi rt ual . . . 

. . . Smart Mjbi I e application specific swtching remains in contrast to other 
vendors such as Q sco Systems and Aruba Networks, whose centralized 
wireless architectures are inflexible and require all traffic to pass 
t hrough a. . . 
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expands the depth and breadth of AirV\6ve's support for wreless 
infrastructure products fromOsco, Aruba , l\^ru. Trapeze, Tropos, 
ProCurve and other leading enterprise W.AN, mesh, and W M^X vendor s. 
Al r\Afeve 5. . . 

...mgration by assessing where network utilization is approaching 
capacity. Q her new features include global device configuration 
tenplates, enhanced rogue access point detection, and integrated 
mDnitoring of routers and switches . 

"The Al rV\6ve 5.3 software reduces our support costs and el 1 ni nat es 
management headaches by maki ng. . . 
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Aruba- Ai rvtave: A subtle harbinger of change? * How vu rel ess rri ght affect 
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Last \week' s announcement that wireless LAN syst em maker Aruba 
intends to snap up W.AN management corrpany Airwave Wreless 
for $37 nil I ion left rre pondering... 

... a par st at us w t h wi r ed 

LANs, wi I I t he pr 1 mar y ent er pr 1 se suppi 1 er s r emai n the t r adi t i onal 
router/ svutch conpani es? Cr will they shift t o w r el ess- cent r 1 c 

conpani es? 

Conversely, will independent W. AN makers without... 

...net war k demarcation lines and requires unprecedented levels of 
1 nt eroperabi I 1 ty? 

There's a reason that the Aruba - Airwave deal put me on t hi s t r ai n 
of thought, a early, Aruba - t he No. 3 enterprise market -share 

leader behind Q sco, according to Synergy Research Q-oup - feels... 

. . . want ed a t ot ai replacement for existing 

W-ANs, " acknowledged M chael Tennefoss, head of strategic marketing 
at Aruba . "Now, we have an entree to make a presentation 

( 1 nt o t hose shops. ) " 

Airwave makes a W-FI management syst em t hat configures and 
nnanages fat and thin access points and W.AN controllers from 
mil 1 1 pi e 

vendors. Tennefoss sees enterprises migrating t r ansi 1 1 onal I y to 
high-speed 802. 11n over an... 

. . . per 1 od dur 1 ng whi ch new 

and legacy equipment will co- exist and require such unified 
management. Aruba has long danced around the wred side of the 

network, too, with firewalls that work... 

...vendors can remain independent entities going forward. Long terni 

any of these independent conpani es, including Aruba , are subject 

to get 1 1 ng acqui red. " 

Not surprisingly, independent W. AN maker IVbru Networks has a 

di f f er ent . . . 
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802. 11n wireless gear to shine 
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.../ABSTRACT: unveiling at Inter op Las Veaas next week a si ew of Draft 2 
IEEE 802. 11n access points , control Per s and rmnagemsnt features 
aimed at spurring enterprise adoption of the technology. The best example 
i s t he vendors. . . 

...over Ethernet. Aerohive Networks is adding the first 802. 1 1n access 
points to its "no- controller " W.AN archi t ect ure. Aruba Networks is 
releasing a pair of two- radio 802. Ilabg access points that can activate... 
TEXT: /\erohive, Aruba , N/feru, Ruckus and Trapeze all getting into the act 
at I nt erop 

Wreless LAN vendors are unveiling at Interop Las Vegas next week a si ew of 
Draft 2 I EEE 802. 11 n access points , controllers and rranagement 
features aimed at spurring enterprise adoption of the technology. 



The new access poi nt s can vary. . . 
. . . Et her net opt i ons. 

Aerohive Networks is adding the first 802. 11n access points to its "no- 
controller " W.AN ar chi t ect ur e. Oont roller functions are di st r i but ed t o 
the Hive access points, which worl^ together to coordinate the W.AN. . . 

...The products use an Aerohive technoiogy cai i ed Smart PoE, vJn\ cU detects 
how nuch power a PoE switch is suppi yi ng to the access point, in nx)st 
cases, according t o t he conpany, the devices... 

...an enterprise si npi y and quickly create and manage W.AN access for 
guests and visitors. Quest- ^^nager costs $10,000. 

Aruba Networks is rei easing a pair of tworadio 802.1 i abg access points 
t hat can act i vat e. . . 

...400 per device, depending on the nunt)er depi oyed. They are siated to 
shi p t hi s quarter. 



Ar uba execut i ves say t he new access poi nt s vu i i r un wi t h f ui i 802. 1 i 

' ' ' ' ' " ' , , ^ . , ^.^^j , g i^g^^ 

accordi ng to 



function using a si ngi e 802. 3af power injector connection. That's because 
of some power rmnagerrent code inside the access point , ac 
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to take a i ook at son^ of these higher -end offerings. 

Reviewers extended invitations to Aruba Networks inc., Bi uesocket 
inc., a SCO Systems inc., i\^ru Networks, Ruckus W rei ess inc. and Trapeze 
Net wor ks. . . 

...and sent engineers to the CRN Test Center i ab to hei p testers configure 
the W.AN access points and controllers . Reviewers ai so exani ned an 
802. 1 1 n access poi nt from San Jose, Cai i f . - based Q sco t hat . . . 

... a SCO?" on page 28) . 

I\^ru's offering included its AP320 access point and its i\/C3000 
controller . The devices were running iVbru software version 3. 4. SR3- 113. 
Mar u' s access poi nt . . . 

. . . Y-Z axi s. 

The Ruckus setup included its ZoneFi ex 7942 access point and 
ZoneD rector 1000 controller . The Ruckus software version was 3.02. The 
ZoneD rector is not necessary to configure the 7942 access point but 
wi t h t he hei p of a Ruckus engineer, reviewers used the ZoneO rector to 
t weak var i ous. . . 

...because they wanted to test under real -world conditions. 
I%vi ewers ran the tests with single access point configurations 



...use and pr i ce/ per f or mance. 

Ruckus offers a Wfeb- based managerrBnt interface to its ZoneO rector 
W.AN svutch , which was used effort iessiy to set up the test vureiess 
environnpnt. From there, i P addr essi ng. . . 

...interface opens up into a dashboard view. Fromthe dashboard, det ai i ed 
information of each currently rmnaged access point is displayed; i\^C 
address, model, IP address, channel and nuntier of clients connected are 
ai I . . . 

...information is listed on the left side of the dashboard. System 
overvi ew of the ZoneD rector controller is displayed as are a devices 
overvi ew and a usage sumrary. 

The interface also has... 
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Text : 

3Gom has introduced a wireless LAN switch targeted at branch and remote 
offices. Shipping this week, the 2- port W(R100 ai sol ncl udes updated... 

. . . and r un, by connect i ngover a W\N link to one of 30on1 s hi gher end W.AN 
switches at a regional or headquarters site. The parent switch 
downl oadsconf 1 gurat 1 on dat a. Local I y, the wireless access points 1 n t he 
br anch aut omat 1 cal I y link up v« t h the... 

... si npl e W&b screens instead of, as in the past, a conrrand line 
i nt erf ace. The branch switch works not only with conpani on 30om access 
poi nt s, but ai so i ncl udes sof t war e t o wor k wi t h. . . 

... which packages such features as AdvancedEncrypt 1 on System (AES) and 
802.111 authentication mechani sms. R val W.AN switches for these kinds of 
sites are aval I abl e ai so f rom Q SCO, Aruba and Synbol . 30om i s conpet I ng 
on price, and by including features such as detection and... 

... for an additional cost . Li st price for the W<R100 is $999; the conpani on 
3Cbm 3750 ^^naged Access Poi nt is $499. 
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...universities wthin the next five years. 
And as i f to give substance to that prediction, Aruba Networks this 
morning disclosed one of the first of those university deployments - an 
order 



f rom . . 

. . . W - Fi (VoW-Fi ) i n school s. 

"ABI Research believes that W-Fi access point and controller equipment 
revenue 1 n t he global higher education marl<et will skyrocket from $137 
n1 I 11 on 
i n 2007. . . 

...that night 1 npact the hardware now bei ng marketed. 
Those products include the hardware about which Aruba today was crow ng, 
sold to Chi o Wfesi eyan "on the strength of a conpet i t i vel y priced, 
t echni cal I y. . . 

. . . open bi d. " 

The value of the Chi o Wfesi eyan order was not disclosed. Under the pact, 
Aruba is supplying redundant centralized l\M> 6000 IVUI 1 1 - Ser vi ce l\^bility 
Oont rollers and more than 400 Aruba AP-124 and AP-125 802. 11n access 
pol nt s 

spread across 50 acadeni c, adrri nl st rat I ve , athletic and residential 
f aci I 1 1 1 es. 

The AP-124 access points will be used with remote antennas to provide 
wi r el ess 

coverage outdoors, the... 
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...in ™ rel ess systems to date, the Trapeze NonStop W r el ess( TiV) network 
and its enabling Virtual Oont roller Ouster technology. This technology 
delivers Oont roller Vi rt ual i zat 1 on which dramatically 1 nproves the overall 
r el 1 abi I 1 t y of t he. . . 

...determines the appropriate placement of access points, accurately 
predicts RF coverage, and automatically pushes the configuration to each 
controller and access point as i t is added to the network. 

In order to make Rngl\^ster even si npl er for network rnanagers to install 
and scale, last month Trapeze announced a turnkey integrated wireless 
management solution in the form of a pr e- conf 1 gur ed appliance, the RM-200, 
t hat can rmnage as many as 5, 000 access pol nt s . 

The RM-200 cont)i nes the latest software version of Rngl\fester wi t h a rack- 
mount hardware. . . 

...to larger and larger deploynBnts si npl y by purchasing and do\wil oadi ng 
license keys for enabling the managennent of additional access points . 
This saves hundreds of IT hours over configuring a generic server. 

Highest Performance Controller Supports 12,000 Qients 

The MDbility Exchange l\^-2800 is Trapeze Networks' next generation, high 
capacity W.AN controller . Wth 28 Gaps of switching, more than four times 
faster than the closest conpet it or, it is the highest performance 
controller available. The l\/X-2800 supports up to 12,000 active client 
devices for larger depi oynBnt s. . . 

...found in higher education and mil t i - f aci I 1 t y healthcare, and 
automatically expands using Trapeze's Virtual Oont roller Cluster 
technology for up to 64 units, meaning that IT staff only manage one 
vi rtual . . . 

. . . Smar t MDbi I e appi i cat i on sped f i c svm t chi ng r emai ns 1 n cont r ast to ot her 
vendors such as Q sco Systems and Aruba Networks, whose centralized 



wireless architectures are inflexible and require all traffic to pass 
t hrough a. . . 
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Aruba Networks, for exarrpl e. Is delivering both new hardware and 
sof t war e wi t h this goal In n1 nd. . . 

. . . new I nnovat I ve f eat ur es: f I r st , t hey' r e upgr adeabi e t o 802. 1 1n vl a a 
software upgrade. Second, Aruba 's management technology enables 
administrators to configure the APs to act not just as access gateways 
for wireless clients, but Intrusion detection devices or as nodes In a 
secure wireless mesh network. 

The APs new software allows them to be turned Into vhat Aruba 
cal I s mDbi I e r emot e access pol nt s, meani ng t hey' r e abl e t o ... I ookl ng t o 
deploy 802. 11n over time," sayl d M chael Tennefoss, head of strategic 
mar ket i ng at Aruba . 

Aruba has done hard work In pricing these devices, he cl al niB, such 
t hat even wi t h a. . . 

...they'll be charged an additional fee, the amount of \Mii ch is 
vol ume- based. 

Additionally, Aruba has ... LAN management abilities, not the least 
of vJr\\ ch was the purchase of Al rV\feve Wreless. Until Aruba 's purchase, 
Al r V\feve was dl st 1 ngui shed one of t he I eadi ng third- par t y wi r el ess net lAor k 
management software... 

...even integrates into larger wired LAN management platforms, including 
IVI crosof t ' s IVIVCl Purchasi ng Al r V\&ve gi ves Aruba a def 1 ni t e I eg up vu t h 
regards to attracting customers vu t h larger wireless LAN management duties 
...re st ayi ng in t hei r own of f 1 ces, and si npl y t aki ng over t he I ead wi t h 
regards to Aruba 's management initiatives, but they'll continue 
supporting third- party hardware, too." 

If those cl al ms bear out over time, Aruba vu I I be 1 n an enviable 
posi 1 1 on on t WD f ront s of t he wi r el ess LAN spect r uni har dwar e and sof t war e 
management . 

But Aruba isn't alone in showing off newW-FI products at Inter op. 
Ruckus W r el ess 1 s. . . onl y $700 - - a def 1 ni t e dr aw f or SIVBs, especi al I y in 
conjunction with Ruckus' low- cost secure wireless switches and 
ZoneD rector management software. 

Q her vendors showing new 802. 11n wireless hardware include 
Aerohive Networks and Trapeze Networks, wth the latter demoi ng a new 
hardware capabi I 1 ty. . . 
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April 27, 2008 
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of aggregate bandwidth, t he Ar ast r a 7148S conpl ement s the 
previously announced Arastra 7124S and Arastra 7148SX. 

firuba. will proninently feature 802. 1 1n at their booth, and the 
conpany will be announcing new 802. 1 1n product extensions. Aruba wll 
introduce enhancements to its green teieworker remote access and 
VPN- r epi acement product fanily, new wireless intrusion prevention and 



classification teclinology, and t fie new nxil t i - vendor AirV^five Wreless 
IVbnagen^nt Sui t e 6. 

Astaro is i auncfii ng t fie Astaro Vib Gateway , an all-in-one product 
to secure and control web access. This solution includes URL... 
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M>t or ol a Ai rtB For All -Wreless Enterprise; Wth new products and 
I nl 1 1 at I ves, execut I ve Suj al Haj el a predl ct s t hat hi s dl vl si on vu 1 1 
I nrpress the enterpri se In the transi 1 1 on to faster 802. 11n netvtorks. 



I nf or mat 1 onWfeek, 
IVbrch 17, 2008 

ISSN: 8750-6874 LANGUAGE: English RECORD TYPE: Ful 1 1 ext 

WORD COUNT: 561 LI NE COUNT: 00049 

TEXT: 

. . . supremacy in t he wi r el ess ent er pr 1 se network! ng mar ket , Mat orol a 
last week released two new products -- a wireless LAN switch and an 
adaptive access point with three radios -- while trurrpeting the arrival, at 
I ast , of . . . 

has seen its market share slip slightly over the last year, 
according to Gartner, with Aruba Networks and l\^t or ol a/ Synlooi adding 
customers. 

l\*)torol a' s new product I 1 ne 1 ncl udes what it cal I s. . . 

...11n access point," the AP-7131, as well as the RFS6000, a mil ti core 
processor- based wireless LAN switch aimed specifically at medium si zed 
busi nesses. 

The arrival of the 802. 11n standard, which is... 
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Language: English Record Type: Ful 1 1 ext 
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of aggregate bandwidth, the Arastra 7148S conplements the 
previously announced Arastra 7124S and Arastra 7148SX 

Aruba will proninently feature 802. 11n at their booth, and the 
conpany vu I I be announcing new 802. 1 1n product extensions. Aruba w I I 
introduce enhancements to its green teieworker remote access and 
VPN- r epi acement product f ani I y, innovative new wreless intrusion 
prevention and classification technology, and the new mjl 1 1 - vendor AirV\feve 
Wreless N/knagement Suite 6. 

Astaro is launching the Astaro W&b Gateway , an all-in-one product 
to secure and control web access. This solution includes URL... 
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Aruba acquires W.AN rmnagerrBnt vendor A rV\&ve; Acquisition gives Aruba 
a foot in the door of Q sco and M)torola custorrers. ( Aruba Wreiess 
Net vtor its) ( Ai r Wive W r ei ess I nc. ) 

Aruba Networks announced today it tias acquired a leading wireless 
LAN managenBnt vendor, AirV\feve Wreiess, for $37 n1 I I i on. 

The purchase gives Aruba a wel I - r egar ded W.AN management 
application, one of the f ew t hat can manage different brands... 



adnlnisters a comron set of features across a mil t i vendor network. 
Today, Ai rV\feve supports Q sco, Aruba , HP ProCurve, 
M3t orol a/ Synbol , Avaya, Foundry, Proxi mi 30Dmi Trapeze, Tropos and many 
other vendors. 

Enterprise W.ANs are less uniform than they may at first seem A 
conpany night deploy W.AN switches and thin access points 

in a headquarters, but chose intelligent access points for retail 
out I et s. . . 

...disruptive technologies" like 802. 11n and Wl\^, says M chael Tennefos, 
head of strategic marketing for 
Aruba . 

"These technologies mean potentially costly large-scale upgrades to 
the edges and core of the... 

... do! ng. " That neans cont 1 nui ng t o devel op its pi at f or m as a 
vendor - neut r al wireless management 

fraiTBwork. Aruba ™il continue to sell its existing W.AN 
management application for Aruba -only deployments. 

Tennefoss says the acquisition gives Aruba the tools to apply its 
"unified network" concept across the various vureless topologies 

and technologies that enterprises are adopting, and blend these more 
seani essi y ™ t h the exi st 1 ng ™ r el 1 ne 1 nf r ast r uct ur e. 

And Aruba now has a foot 1 n t he door of Q sco and Mat or ol a 
customers, \Miere Al rV\6ve has... 

. . . OCJVPANY NAIVES: Cbntracts; Aruba W r el ess Net wor ks. . . 
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Aruba - Airwave: Asubtie harbinger of change? * l-bw vti rei ess rri ght affect 
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Network Wbr I d, pNA 
Jan 14, 2008 
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Aruba - Airwave: Asubtie harbinger of change? * l-bw wi rei ess rri ght affect 
sourcing strategies. ( Aruba Wreiess Net wor Its) ( Ai r Wive W r ei ess Inc.) 

Last week's announcement that wireless LAN syst em maker Aruba 
intends to snap up W.AN managenBnt conpany Airwave Wreiess 
for $37 mi I I ion left me pondering... 

... a par st at us wi t h wi r ed 

LANs, will the primary enterprise suppliers remain the traditional 
router/ svutch conpani es? Cr wi I I they shift to wreiess -centric 

conpani es? 

Conversely, vu I I independent W. AN makers without wired network gear, 
t el ephony equi pment and uni f 1 ed. . . 

...network demarcation lines and requires unprecedented levels of 
1 nt eroperabi I i ty? 

There's a reason that the Aruba -/\irwave deal put me on t hi s t r al n 



of thought, a early, Aruba - t he No. 3 enterprise rrar ket - shar e 

leader behind Q sco, according to Synergy Research Q-oup - feels... 

. . . want ed a t ot al replacenBnt for existing 

W-ANs, " acknowledged M chael Tennefoss, head of strategic marketing 
at Aruba . "Now, we have an entree to make a presentation 

( 1 nt o t hose shops. ) " 

Al rwave makes a. . . 

. . . per 1 od dur 1 ng whi ch new 

and legacy equipment will co- exist and require such unified 
managen^nt . Aruba has long danced around the wred side of the 

network, too, with firewalls that work... 

...vendors can remain independent entities going forward. Long terni 

any of these independent conpani es, including Aruba , are subject 

to get 1 1 ng acqui red. " 

Not surprisingly, independent W.AN maker l\^ru Networks has a 

di f f er ent . . . 

. . . OCIVPANY NAIVES: l\^rgers, acquisitions and divestments; Aruba Wreless 
Networks. . . 



17/3,K/7 (Item 1 f romf i le: 624) 

DI ALOG( R) Fl I e 624: IVbQ- aw- Hi I I Publ 1 cat 1 ons 
(c) 2008 l\^Q'aw-Hill Co. Inc. All rts. reserv. 

01298506 

M<\KI NG OCM>ANY Al FRAAVES SAFE FOR W Fl 

Edi t ed by Cat her 1 ne Ar nst 
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Decenber 9, 2002 
JOURNAL CXDE: BW 
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TEXT: 

... it. You can do it in 10 minutes,'' says Pankaj iVfeingI i k, a founder of 
startup Aruba Wreless Networks. 

I\^ngl 1 k and co-founder Keerti l\^lkote have designed t ool s t o I et the 
corporate IT guys lock down the airwaves. The main conponent is a secure 
vureless network svutch that sits in the wring closet next to the 
other critical network devices. That switch... 

... air, al I ow ng legitimate users onto the network, blocking others, and 
keeping the systems people briefed. Aruba has filed for patents and begun 
talking with potential customers in financial services and other... 

TABLE: 

CX3\/PANY NAIVES: Aruba Wreless Networks ; Starbucks 
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Duke builds huge 11n vureless net 

Oox, John 

Network W)r Id v25n8 PP: 14 Feb 25, 2008 
ISSN: 0887-7661 JRNL CODE: NVW 
WCRD CCUNT: 977 

...TEXT: points fromN/feru Networks. Wreless pioneer Carnegie IVbl I on 
University in Decenter selected two W.AN vendors, Aruba and Xirrus, as 
i t s 802. 1 1 n suppi i er s for a phased W.AN upgr ade t hat may in... 

...points when completed: 2,500+ Q sco Aironet 1250s 



Nurrter of Q sco 3750- E enhanced PoE switches : 110 (estimated) 

Nuntier of Q sco Catalyst 6500 svwtches : Three, with Wreless Service 
IVbdul e (WSIV) 

Throughput planned: Targets range from roughly 25l\/bps each for five to si; 
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Arnst, Catherine; Q-oss, Neil 

Business Wfeek n3811 PP: 84 Dec 9, 2002 

I SSN: 0739- 8395 J RNL CCDE: BV\E 

...ABSTRACT: W Fi ) networks often ™ sh they could roam unt et her ed with the 
same laptop at work. Startup Aruba Wreless Networks has designed tools 
to let the corporate IT guys lock down the airwaves. The main conponent is 
a secure vureless network svutch . 
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North America's Oormuni cat i on Industry Q obai Strategies for Three 
Northern American Oorrpani es 

Budwey, James N. 

Tel econmini cat 1 ons (International Edition) v25n10 PP: 224-236 Cct 1991 
J RNL CCDE: Tl E 
VCRD CCUNT: 6108 

...TEXT: response, intelligent networks, upgrading and digitizing the 
network infrastructure, video teleconferencing, eel I ul ar/ mobi I e radio, the 
wireless connunl cat 1 on systems, routers, bridges , gateways , frame 
relay, PBX, key systems, adjunct processors, facsirrile, and many others, 
all represent robust and. . . t r ansni ssi on equi prrent , to countries such as 
Spain, the Netherlands, Indonesia, Taiwan, Singapore, Egypt, Poland, 
Armenia, Aruba , Iferea, IVbxi co, and others. 

A second el ement t o t he cor por at e st r at egy is "to est abl 1 sh wor Id... 

17/3,K/11 (Itemi fromfile: 647) 

Dl ALOG( R) FI I e 647: CIVP Conput er Ful I t ext 
(c) 2008 O/P IVfedi a, LLC All rts. reserv. 

01306550 CIVP ACCESSI CN NUVBER: CRN20080324S0012 

The N Crowd - New wi rel ess gear offers better performance, but doesn't yet 
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to take a look at some of these higher -end offerings. 

Reviewers extended invitations to Aruba Networks Inc., Bl uesocket 
Inc., a SCO Systems Inc., I\^ru Networks, Ruckus Wreless Inc. and Trapeze 
Net wor ks. . . 

...of use and pr i ce/ per f or rrance. 



Ruckus offers a Vfeb- based management interface to its ZoneD rector 
W.AN svutch , vt\ was used effortlessly to set up the test wireless 
envi ronrTBnt . From there, I P addr essi ng, SSI D and security methods are 
configured. Ruckus' syst em support s up... 

COVPANY NAIVES ( Dl ALOB GENERATED) : Acer ; All VAR ; Aruba Networks I nc ; 
Big Dog Partner Program; Bl uesocket I nc ; Bottom Line ; Cal ence LLC; 
Q SCO Syst ems I nc. . . 
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30om i nt reduces branch of f I ce wi rel ess 

Byl i ne: John Oox 

Journal: Network Wbrld 

Publ i cat 1 on Dat e: Sept enter 27, 05 

W)rd count: 212 Line Count: 21 



3Com has introduced a wireless LAN switch targeted at branch and 
remote offices. Shipping this week, the 2- port W(R100 al sol ncl udes updated 



. . . conf i gur e, and r un, by connect i ngover a V\AN link to one of 3Con1 s hi gher 
end W.AN switches at a regional or headquarters site. The parent 
svutch downl oadsconf 1 gur at 1 on dat a. Local I y, the vu rel ess access points 
in the br anch aut omat 1 cal I y link up wi t h t he W<R1 00 t o cr eat e t he W.AN. . . 

...2, which packages such features as AdvancedEncr ypt 1 on System (AES) and 
802.111 authentication mechani sms. R val W.AN switches for these kinds 
of sites are available also from Q sco, Aruba and Synt)ol . 3Com 1 s 
conpet 1 ng on price, and by including features such as detection and... 
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Balancing W-FI access and security 

* Aruba protects against foreign client infections 
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W)rd Count: 502 Line Count: 50 

* Aruba protects against foreign client infections 

Text : 

... to a contractor, consultant or supplier, and are not provisioned and 
managed by your I Torgani zat 1 on. Aruba W rel ess Networks recently 
announced its approach to balancing the security and access issues 
surroundi ng for el gn. . . 

... W-FI systems vendors, too, are at least thinking about endpoi nt 
security. After all, a vu rel ess access point or vurelessLAN svutch 
night be the very first point of corporate network contact for a mobile 
device that has been exposed to I nt er net i nf ect 1 ons before attenpting to 
reconnect. In Novent)er 2004, Aruba said it was t eani ng with security 
conpani es Sygat e and Fort i net to integrate the st at ef ul firewall in Aruba 
' s W.AN swi t ch / cont roller wi t h the ot her conpani es' cl i ent sof t war e and 
firewall technologies, respectively. Earlierthis month, the fruit of the 
Sygat e partnership emerged in the form of Q 1 ent Integrity Module software 
for Aruba appliances. Wth it, Aruba appliances can deter nine if the 
client attenpting to connect is an unmanaged device. If it... 

blocked from comninl cat i ng v« t h other W-FI clients in 
peer -t o- peer f ashi on, notes Jon Q-een, Aruba product manager. Perhaps most 
interesting is the virtual desktop feature. Since most people don't... 



cont rol I ers, but we haven't heard any further developments on that 



relationship (or on t lie Aruba -Fortinet r el at i onsfii p, for that matter). 
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Extreme updates its vu rel ess LAN msnu 

New access points and W.AN switches support VoW-Fi, easier rranagerrent 
and securi ty. 

Byl 1 ne: Phi I Hochnut h 

Journal: Net war k Wbrld Page Nunloer: 10 

Publication Date: June 27, 05 

W)rd count: 644 Line Count: 63 

New access points and V^AN switches support VoW-Fi, easier managerrent 
and securi ty. 

Text : 

... line, introducing appliances and access pointsthat support faster 
client roani ng, CbS and i nproved management of W.AN security and 
infrastructure. Extreme says its Sunrri t VM W.AN switches and Altitude 
350-2 access points could help organizations better support depi oyment sof 
vol ce over v* r el ess. . . 

... with InStat/IVDR " Thi sequi pment is designed to run in heterogeneous 
netWDrks," whereas Extreme's past wireiess - LAN ar chi t ect ur e relied on 
sof t war eadded to its LAN svutches for rranagi ng and securing access 
poi nt s. The Sumri t V\M 1 s a wi r el ess- LAN cont r ol appi i ance. . . 

... VoW-Fi gatewaysto support the SVP pr ot ocol . ) In addition to airwave 
QdS, the Sumri t V\M svutches support Layer 3 fast roaming, which lets a 
W.AN client roam across accesspoints connected to different subnets. To 
support this, the Sunrri t \/\M makes. . . 

the first major upgrades to Extreme's W.AN portfolio since it 
1 nt roducedi t s Altitude 300 and W.AN- enabled Sumri t and Alpine Layer 2/3 
Ethernet switches in 2003. Extreme says the new Altitude accesspoints 
vu I I not work with the older W.AN -enabled switches , but users with 
ol der Al 1 1 t ude 300 access poi nt s can use t he devi ceson newer Sumri t VtA . . 

features such as QdS and roaming support. The Sumri t V\M- based 
architecture is similar to VV.AN overlay technology offered by W.AN 
svutch vendors such as Aruba W r el essNet wor ks and Trapeze Networks, and 
a SCO' s Ai r espace- based W.AN technol ogy, as wel I as VoW. . . 
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TEXT: 

...digital cable system The Pan American cable system would link the U. S. 
Virgin Islands, Aruba , Venezuela, Oil ont)i a, Panama, Ecuador, Peru, and 
Chile. The conpani es involved are Americatel Corp., AT&T... 

. . . CO/PANY NAI\/E( S) : Exchange Carrier Association ; Network Services ; New 
York Public Service Comri ssi on ; North American Numbering Council ; Oceanic 
W rel ess Network I nc ; Oklahoma Cbrporation ; Pacific (^t evtay Exchange 
; Phi I 1 ppi nes East er n Tel ecomruni cat i ons Phi I i ppi nes I nc ; Publ 1 c Ut 1 I 1 1 y 
ODntrol ; San Juan Telephone Co I nc ; Southern... 
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...and marl^ets lii gli performance l^nowi edge- based processors for a variety of 
advanced wireiine and nx)bi i e wireiess networking systerrs, sucli as 
routers, switches , vu rei ess infrastructure equiprrEnt, networl^ security 
appi i ances, networl^ access equipment and netwDrked storage devices. 
Net Log i c iVI cr osyst ems' l^now^ edge. . . 

. . . COVPANY NAiVES: DELQ TTE AND TOUCHE ( ARUBA ) 
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Aruba wi i i proninentiy feature 802. 11n at t fiei r bootfi, and t fie conpany 
wi i i be announcing new 802. 1 1n product extensions. Aruba wi i i introduce 
enfiancement s to its green teieworl^er remote access and VPN- r epi acement 
product fanliy, innovative new wi rei ess intrusion prevention and 
ci assi f i cat i on t echnoi ogy, and t fie new nui t i - vendor AirV\feve W rei ess 
l\/bnagemBnt Sui t e 6. 
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. . . P 500 Conpani es' 

NYW)31 02/ 13/2008 08:00 r f Vi coni cs- ASHRAEAwards 

( l\/CNTREAL) Vi coni cs W rei ess C^teway Receives Honour abie iVbnt i on 
for ASHRAE Product innovation Awards 

NYW)50 02/ 13/2008 08:00 r... 
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TEXT: 

. . . conpl exi t y, and IT managers wrestle with the twin burdens of staff 
1 1 nB and security when configuring and maintaining vureless APs ( 
access points ) across their enterprises, a previously unnecessary 
category of network management solution has started to proliferate... 

a SCO, and f rom newcomers such as Sputnik, central controllers work 
wth the vendor's proprietary APs to aggregate the configuration , 
updating, and monitoring of entire W.ANs. Providing configuration t enpl at as 
and a Wfeb- based interface for managing groups of APs , these controllers 
can apply comron configurations to hundreds of APs at a 1 1 me, and they 
can reduce the time to install new APs by using... 

. . . r esul t , 1 npl ement 1 ng a cent r al cont r ol I er can be qui t e cost - ef f ect 1 ve. 
A si ngl e controller can typically manage as many as several hundred 
access points at a fixed cost that can drop below $10 per access point 
for large deployments... 

. . . t ur ni ng t hem 1 nt o dunb r adi os connect ed t o a cent r al swi t ch. 

The closest similar devices from Vernier , BI uesocket , and Reef edge 
control aspects of net work- edge issues for W.ANs, but Syntol' s approach... 

...of the network entirely into the server closet by el i rri nat I ng any 
network function from the access points . 

The l\^bi us Axon switch manages its "access ports," as Synt)ol terms 
t heni as a cloud of radio coverage. The first... 

. . . year . 

U|3dat 1 ng conf 1 gur at 1 ons cent r al I y , especi al I y M<\C ( medi a access 
control) lists and other authentication that network adrri ni st r at or s 
choose to enable in each AP , can represent a huge 1 1 rre savings. But 
despite these benefits, the current controllers have two... 

...exchange authenticated, encrypted rressages that al I ow t he controller to 
sense the presence of newly installed access points , pass them 
configuration Info, and detect problerrs on the W.AN. Proximand Q sco are 
also looking at 1 ncl udi ng. . . one another in a peer -to- peer network. No 
centralized controller handles each device's configuration ; instead, 
access points si t 1 n a rresh, updating themselves as information passes 
f rom one t o t he next . 
Bi I I . . . 

. . . I et t hem avoi d bui I dl ng head count whi I e rol I 1 ng out W.AN servi ce. The 
current generation of managerrent controllers, although wedded to 
proprietary access points , can turn large-scale W.AN depi oyment from 
1 npossi bl e to easily manageable. The next generation will thoroughly 
integrate the control of W.AN access points into an adrri ni st r at i ve 
workflow, further reducing management costs. 

Related Ar 1 1 cl es: Sped al Report: Wreless network managerrent 

THE BOTTOVI LI NE. . . 

. . . vendor s such as Pr oxi m and Ci sco can r adi cal I y r educe wi r el ess oper at 1 ng 
costs by automating some configuration and managerrent of W.AN access 
points . However, these tools require the use of access points from a 
single vendor and proprietary... 

...controller and access points. 

Test Center Perspective: The use of XM_- based protocols to transnit 
configuration and other information using corrrrDdity access points , 



peer -to- peer access points, or even dunti radios across large netvrorl^s ni gtit 
obvi at e t he. . . 

TI^DE NAIVES: Syrrbol Tectinol ogi es IVbbi us Axon Wreless Switch ( 
Wreless LAN' W\N syst em . . 
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deci des to r et hi nk its or 1 gi nal deci si on and open up t he wi r el ess 
network? Now t he network adrri ni st rat or has to upgrade the APs , which 
were artfully and painstakingly placed above the ceiling tiles. 
Unless the software purchased with... 

...keeps the user connected, Sturniolo adds. 

After security, the single biggest reason customers come to Vernier 
is because it has a roaning solution across subnets that allows users to 
move seani essi y. . . 

...to another w t hout breaking the connection, says Julian Richards, senior 
director of product marketing at Vernier Networks in l\A)untain View, 
Calif. If roaning is not addressed, "(and) you move to anot her . . . t hat each 
AP be changed 1 ndi vi dual I y. 

To address the need for better central W.AN control. Vernier offers 
a t wo- 1 1 er sol ut 1 on t hat 1 ncl udes boxes at t he edge t hat t he APs pi ug. . . 

...this month its solution for central control of W.ANs as well. Using a 
so- called wireiess switch -- not actually wireiess but cabled to the 
wireiess APs -- Synt)ol ' s Msbi us uses dunt)ed-down access ports rather than 
access points and puts all of the intelligence into the svutch that 
connects to the network. Wth W.AN management centralized on a switch , 
net wor k manager s wi I I have a syst enwi de vi ew of t he net wor k on t hei r 
consol e and a. . . 

...see "At the wireless edge"). To sidestep this potential probleni 
conpani es such as Synbol and Vernier plan to build redundancy into the 
next version of their systems, according to sources. 
The. . . 
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l\fenhasset, N. Y. - Using dunt), low- cost access points (APs) tethered 
to a centralized mil ti service svutch , Syrrbol Technologies has 
r earchi t ect ed the enterprise wireless - LAN depi oyn^nt model. Its switched 
wireless architecture looks to increase network manageability and to offset 



...frustrating customers because these can cost up to $600 or more (for an 
ent er pr i se- cl ass access point ). The management problems only increase 
as nodes ar e added. " 



Wii I e conpani es such as Reef Edge and Vernier do add security, 
rrobility and ot iier managen^nt functions in a relatively low- cost, lii gtii y 
scai abi e. . . 

. . . Al i t fie Access Ports run baci< to an intelligent Layer 2, 3 and 4 
mil ti service svutch that contains the security features, wireless 
services, application programring interfaces and content management 
software. The Linux- based IP switch comes in... 

. . . 367. 

The archi t ect ur e has si ni I ar i t i es to Pr oxi n1 s Har mony AP Oont r ol I er 
and Bl ueSocl^et I nc. ' s Wreless (^teway . But those "require the networl< 
to be redesigned and r earchi t ect ed whenever APs are added," said... 
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the extensible authentication protocol ( EAP) . 
Vendor- agnost i c W.AN security appliances are available from 
Bl uesocket , Reef Edge, Vernier Networks and Ecutel. Sitting between the 
APs and the wired LANs, the products provide centralized... 

...that connects up to eight Ethernet devices to an AP, and a 

bui I di ng-to-bui I di ng bridge . All Aironet products support 802. 1x and 

128- bit V\EP. 

" Wreless was the first Q sco specialization program we introduced, 
in February 2001," says Surinder Brar, senior... 

. . . 3Con1 s Wbrkgroup Bridge supports up to four devices vi a a hub. A 
separate client bridge supports a single Et her net - r eady device. 

"Qjr wreless certification pr ogr am r eal I y got started (in 
January)," says Dave Srri t h, vice president of sales for ...needed to add 
802. 1x, per-session dynarri c keys, VPN t unnel i ng, RADI US suppor t and 
centralized rranagement of up to 30 APs . Harmony and Skyline also come 
i n 802. lib versi ons. 

VAR suppor t : The di r ect i on of Pr oxi m . . 

. . . 242-9700 

vwvw. r eef edge, com 
30om 

Sant a a ar a, Cal i f . 
(408) 326-5000 
www. 3com com 
Vernier Networks 
M)unt ai n Vi ew, Cal i f . 
(650) 237-2200 
www. ver ni er net wor ks. com 
ht t p: / /www. var busi ness. com 
Copyr i ght . . . 
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network. CUr invitee list included Bl uesocket , Ool unt)i t ech, Ecut el , 
Fortress Technologies, Net l\A)t 1 on Wreless, Net seal, Reef Edge and Vernier 
Networks. Net seal didn't respond to our inquiries, and Fortress declined 
our invite. Vernier initially agreed to participate but subsequently 
withdrew, citing a lack of resources. Then, at the 11th hour, SM3 Networks 
enthusiastically offered us its CEIVI ver si on of Vernier 's product. 

The solutions inpressed us wi t h management capabilities that 
significantly enhanced the security and... 

. . . managerrent . 

A Tal e of Two Ar chi t ect ur es 

Three of the products we t est ed- Bl uesocket WG-IOOO Wreiess 
Qatevway , Reef Edge Connect Syst em and SIVC El 1 t eOonnect - ar e hardwar e- based 
systems; the rest run as ser vi ces. . . CHQ CE 

B- 

SIVC Networks 

EiiteOonnect W.AN Security system 

SIVC El 1 t eConnect is an CEM version of Vernier 's two-tiered 
6000- series system The Secure Server authenticates users, maintains a 
consistent conf 1 gur at 1 on. . . pr oduct never dropped a packet \Mii I e roaming. 
Although El 1 1 eOonnect ' s throughput could use some inprovement. Vernier 
and SMD have gotten ever yt hi ng else right. 

SMD El 1 t eConnect W.AN Secur 1 t y Syst em SIVC El 1 t eConnect W.AN. . . st ar t s 
at $7,500. Reef Edge, (201) 548-2600. vwvw.reefedge.com 

Cf 

Bl uesocket 

VG-1000 Wreiess Gateway 1.0 

Bl uesocket ' s V\G-1000 Wreiess C^tevtay can deliver maxi num cont rol 
over your W.AN . This product is loaded vm t h f eat ur es; it offers far more 
control of V\ILAN clients than... 

. . . conpl 1 cat es management in I arge envi ronnBnt s w^ier e mil 1 1 pi e syst ems ar e 
deployed. You can set up two vureiess gateways in a master-slave 
configuration to provide fail over support for added redundancy, but if you 
want to support a new wireiess subnet, you have to configure a new 
gateway from scratch. Version 2.0 still lacks central management. 
Bl uesocket says it wants to avoi d. . . versi on, the WG-IOOO would appear to 
wor k best 1 n an or gani zat 1 on v« t h a f I at vh r ei ess net wor k r equi r 1 ng onl y 
one gateway or in environments where management of subnets and network 
security may be decentralized (many university... 

. . . 11 m t at 1 ons , Bl uesocket ' s VG- 1 000 1 s an appeal 1 ng and cost - ef f ect 1 ve 

sol ut i on. 

Bl uesocket W&IOOO Wreiess Gateway 1.0, $5,995. Bl uesocket , 
(781) 328-0888, (866) 633-3358. www.bluesocket.com 

Q..to test each product v« t hout interference from any other. 

For the sof t war e- based products, we configured access points 
behi nd each r out er wi t h si 1 ght I y over I appi ng eel I s. Wien a wi r el ess devi ce 
moved from the coverage... 

...operate wlien we roamed between access points. To evaluate roaming speed, 
we set up a switch that was connected behind both wireiess subnets and 
made VLANs on t he switch to support each vureiess subnet. Then we wired 
a PC 1 nt o t he same svu t ch . W t h t he hel p of t he swi t ch' s comnand I 1 ne, we 
switched the PC between subnets... 
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i n vi r t ual I y any I ocat i on, even if an AC out I et is not near by. 
Note that somB ARs and Ni Os can be configured to reduce t lie 
out put power of t he r adi o, ef f act i vei y shr i ni<i ng t he RF cei i r adi us and. . . 

. . . cei I i ng. In desi gni ng a canpus W.AN, be aware i t may not be I egal to 
purchase APs from one conpany and configure t hem wi t h third-party 
antennas. This is because when vendors subrri t their products for FOC. . . 

...can consider third- party management and security products Bl uesocket , 
Cbl until t ech, Ecutel, Funk, NetlVbtion, Net Seal , Reef Edge, Vernier and 
others. Finally, many organizations use st andar ds- based VPN gat eways and 
VPN clients on al I . . . exi st 1 ng Ethernet equipment. For example, if you have 
lots of bandwidth and fairly advanced Ethernet svu t ches , you night 
establish vu rei ess VLANs- maybe even a si ngl e vu rei ess VLAN-to more 
easily manage addresses and to enforce security policies. The w rei ess VLAN 
can. . . 

...invest in some additional hardware and software. 

First, think about how you' re going to rmnage hundreds of access 
points . Oonf i gur at i on of APs in an enterprise environment needs to be 
automated. Some AP vendors, including Proxi mi desi gn t hei r . . . 
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access points and often present the available systems to you in a 
pick list. Some access points can be configured to suppress broadcast 
of SSI s. Cn systems configured in this manner, only clients that know... 
model , it 1 s 1 narguabi y el egant . 

Hardwar e- based security solutions include offerings f r om Bl uesocket , 
Reef Edge and Vernier Networks. These start-up vendors sell products that 
involve the interconnection of your access points... 

...or more essential security features. For exanpl e, NASA's Advanced 
Super conput 1 ng □ vi si on has developed V\FG ( W rei ess Firewall Gateway ), 
built on CpenBSD and providing DHCP ser vi ces, SSL- based Wfeb authentication 
and customizable per -user... 

...restricting access t o t he W.AN based on a table of M<\C addr esses stored 
on the access point . Some vendors provide rranagerrent utilities that 
I et t hese MIKC ACLs be di st r 1 but ed to mil 1 1 pi e access poi nt s ™ t hi n an 
organi zat 1 on. . . 
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technologies, such as 802.11b, 802.11a and Bluetooth, and supports 
mil 1 1 pi e m)b\ I e devi ces. 

The Vernier Netvrorks CS 5000 Control Server centrally manages 
authentication for all wireless users, coordinates all Layer 3 roani ng, and 
enforces policies and user privileges. The Access Nfenager connects to 
mil 1 1 pi e access points or edge svutches, enforcing pre- configured 
user rights for authenticated users, enables roani ng, and functions as a 
PPTP, I Psec and L2TP. . . 

...to 54M)ps in standard mode and 72l\/bps in Atheros Turbo M)de. 

Bluesocket's WG-IOOO Wreiess Gateway provides access, security, 
nanagement and nDbility solutions for 802.11 and Bluetooth devices. 
Taiwan- based Ed 1 max Technology offers 802... 

. . . Technol ogy / 1259 www. ni I an. com 

M3t 1 ent / 459 www. mot 1 ent . com 

Fteef Edge / 453 www. r eef edge, com 

Vernier Networks / 7988 www.verniernetwDrks.com 
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of treating W.ANs just like Ethernet LANs, deploying APs inside the 
conpany firewall. Teieworkers using wireiess gateways to reach DSL or 
cable connections at home often make a si n1 I ar ni stake. 

Wthout adequate access control on the VV.AN , wireiess gateways 
and APs should always be placed in unt rusted territory. Failure to do so 
leaves t he. . . adnl ni st r at 1 on. The same methods used to harden V\AN access 
routers should be applied to wreiess Aps --disable unused services, 
configure strong passwords and . . . W.ANs- -can benefit from enabling this 
basi c measure. 

* l\AC Access Control Lists: Mast ent er pr 1 se- gr ade APs can be 
configured with l\^C address lists that prevent associations with unknown 
wireless stations. Since you vu I I need. . . L2TP- over - 1 PSec VPNs encrypt data 
all the way from remote access clients to security gateways at the 
private network edge. Wreiess laptops and teieworker desktops already 
equi pped ... t he VPN t unnel : 

* Tunnel to the AP: A few access points can operate as VPN gateways 
, terminating PPTP or I PSec tunnels at the edge of the W.AN--for example, 
t he col ubri s CM 05Q 

* Tunnel t o a VPN/ Fi r ewal I : Dependi ng upon net wor k si ze, t r af f 1 c. . . 
are required, consider tunneling to a sped al - pur pose wi r el ess access 
appliance f rom Bl uesocket , Reef Edge or Vernier Networks. 

* Upper -Layer Encryption: N/bt hods comnDnl y used to encrypt Internet 
appi 1 cat 1 ons can be used t o. . . r eef edge, com) 

Securi tyFocus (vwwv. securi tyf ocus. con) 
Time V\6rner ( www. aol 1 1 mewar ner . con) 
UPS (www. ups. con) 

Vernier Networks (www.verniernetwDrks.con) 
FI CURE 1 

Users Reporting W.AN Security Incidents Q Attacks 
Unaut hor 1 zed rogue. . . 
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W.AN on canpus 

Schwartz, Ephrai m 

InfoWbrld v24n3g PP: 1, 34 Sep 30, 2002 
ISSN: 0199-6649 JRNL CXX)E: I FW 
WCRD CCUlvn-: 1583 

. . . TEXT: deci des to r et hi nk its or i gi nal deci si on and open up t he wi r el ess 
network? Now t he network adrri ni st rat or has to upgrade the APs , which 
were artfully and painstakingly placed above the ceiling tiles. 

Unless the software purchased with... 

...keeps the user connected, Sturniolo adds. 

After security, the single biggest reason customers come to Vernier is 
because it has a roaming solution across subnets that allows users to move 
seani essi y. . . 

...to another without breaking the connection, says Julian Rchards, senior 
director of product marketing at Vernier Networks in l\A)untain View, 
Calif. If roaming is not addressed, "[and] you move to anot her . . . t hat each 
AP be changed 1 ndi vi dual I y. 

To address the need for better central W.AN control. Vernier offers a 
two- tier solution that includes boxes at the edge that the APs plug... 

...this month its solution for central control of W.ANs as well. Using a 
so-called wireiess svutch - not actually wireiess but cabled to the 
vureiess APs - Synlooi ' s Msbi us uses dunloed-down access ports rather than 
access points and puts all of the intelligence 1 nt o t he switch that 
connects to the network. Wth W.AN management centralized on a svutch , 
net wor k manager s wi I I have a syst emwi de vi ew of t he net wor k on t hei r 
consol e and a. . . 

...At the wireless edge," below). To sidestep this potential problemi 
conpani es such as Synt)ol and Vernier plan to build redundancy into the 
next version of their systems, according to sources. 

The. . . 
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...TEXT: technologies, such as 802.11b, 802.11a and Bluetooth, and supports 
mil 1 1 pi e mobi I e devi ces. 

The Vernier Networks CS 5000 Control Server centrally manages 
authentication for all wireless users, coordinates all Layer 3 roani ng, and 
enforces policies and user privileges. The Access l\^nager connects to 
mil t i pi e access points or edge svutches, enforcing pre- configured 
user rights for authenticated users, enables roani ng, and functions as a 
PPTP, I Psec and L2TP. . . 

...to 54MDps in standard mode and 72l\/bps in Atheros Turbo Mode. 

Bluesocket's WG-IOOO Wreiess Gateway provides access, security, 
rmnagerrent and mobility solutions for 802.11 and Bluetooth devices. 
Taiwan- based Ed i max Technology offers 802... 
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TEXT: 

l\^nhasset , N. Y. - Using dunti, low-cost access points (APs) tethered 
to a centralized milt I service switch , Syntol Technologies has 
r earchi t ect ed the enterprise wireiess - LAN depi oymBnt model. Its switched 
wireless architecture looks to Increase netwDrk rranageabi I i t y and to 
of f set . . . 

frustrating customers because these can cost up to $600 or more 
(for an ent er pr I se- cl ass access point ). The management pr obi ems only 
Increase as nodes are added." 

Wil I e conpani es such as Reef Edge and Vernier do add security, 
nDblllty and other management functions In a relatively low- cost, highly 
seal abl e. . . 

...All the Access Ports run back to an Intelligent Layer 2, 3 and 4 
milt I service svutch that contains the security features, wireless 
services, application programring Interfaces and content management 
software. The Linux- based IP switch comes In... 



The archi t ect ur e has si ni I ar 1 1 1 es to Proxl n1 s Har mony AP Cant r ol I er 
and Bl ueSocket I nc. ' s Wreiess (^teway . But those "require the network 
to be redesigned and r earchi t ect ed whenever APs are added," said... 
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netwsrk. OLir Invitee list Included Bl uesocket , Col unt)l t ech, 
Ecutel, Fortress Technologies, Net M)t I on Wreiess, Net seal. Reef Edge and 
Vernier Networks. Net seal didn't respond to our Inquiries, and Fortress 
declined our Invite. Vernier Initially agreed to participate but 
subsequently withdrew, citing a lack of resources. Then, at the 11th hour, 
SM3 Networks enthusiastically offered us Its OEM version of Vernier 's 
product . 

The solutions I npressed us wi t h management capabilities that 
significantly enhanced the security and... 
. . . management . 

A Tal e of Two Architectures 

Three of the products we t est ed- Bl uesocket Wa-1000 Wreiess 
Gateway , Reef Edge Connect Syst em and SM3 El 1 1 eOonnect - ar e har dwar e- based 
systems; the rest run as ser vl ces. . . OHO CE 



SIVC Networks 



El i t eCbnnect W.AN Security system 

SIVC El i t eOonnect Is an CEM version of Vernier 's tvvo- tiered 6000- 
serles system The Secure Server authenticates users, maintains a 
consistent conf I gur at I on. . . pr oduct never dropped a packet vrfil I e roanlng. 
Although El I t eOonnect ' s throughput could use some Inprovement, Vernier 
and SIVC have gotten everything else right. 

SIVC El I t eConnect W.AN Secur I t y Syst em SIVC El I t eConnect W.AN. . . 
starts at $7,500. Fteef Edge, (201) 548 -2600. vwvw.reefedge.com 

Cf 

Bl uesocket 

V\G- 1 000 W r ei ess Oat evtay 1 . 0 

Bl uesocket ' s WQ-IOOO Wreiess C^tevtay can deliver maxi num 
control over your W.AN . This product Is loaded with features; It offers 
far more control of W.AN cl I ent s t han. . . 

. . . conpl I cat es management In large environments where mil tl pie systems are 
deployed. You can set up two wi rei ess gateways In a master-slave 
configuration to provide fall over support for added redundancy, but If 
you want to support a new vu rei ess subnet, you have to configure a new 

gateway from scratch. Version 2.0 still lacks central management. 
I uesocket says It wants to avol d. . . ver si on, the V\G-1000 would appear to 
work best i n an organi zat I on vu t h a f I at wi rei ess network requi rl ng onl y 
one gateway or In environments wliere management of subnets and network 
security may be decentralized (many university... 

. . . I I ni t at I ons, Bl uesocket ' s V\G- 1 000 I s an appeal I ng and cost - ef f ect I ve 
sol ut I on. 

Bl uesocket V\G-1000 Wreiess Gateway 1.0, $5,995. Bl uesocket , 
(781) 328-0888, (866) 633-3358. vvvwv.bluesocket.com 

C..to test each product without interference from any other. 

For the sof t war e- based products, we configured access points 
behl nd each r out er wi t h si 1 ght I y over I appi ng eel I s. Wien a wi r el ess devi ce 
moved from the coverage... 

...operate vJnen we roamed between access points. To evaluate roanlng 
speed, we set up a switch that was connected behind both vu rei ess 
subnets and made VLANs on t he switch to support each wi rei ess subnet. 
Then we wi r ed a PC I nt o the same swii t ch . W t h t he hel p of t he swi t ch' s 
comrand line, we switched the PC between subnets... 

. . . CCIVPANY NAIVES ( □ ALCG GENERATED) : St udl es ; Sof t war e Product s ; Subnet 
Roani ng Support ; Synbol Technologies ; Syracuse University Real W)r I d 
Labs ; SIVC Networks ; Vernier Networks ; Wreiess Transport Layer 
Secur 1 ty 
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Garrpus WAN l^esi gn - Tasked wi t h i rrpi ement i ng a wi rei ess LAN? 1 1 ' s not as 
di f f i cui t as you rri ght t hi nk once you know t he basi cs of radi o desi gn. 

Dave MdI t a 
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i n vi r t ual I y any I ocat i on, even if an AC out I et is not near by. 

Note that some APs and Nl CB can be configured to reduce tine 
output power of the radio, effectively shr inlying the RF cei i radius and... 

. . . cei i i ng. in designing a canpus W.AN, be aware it may not be i egai to 
purchase APs from one conpany and configure t hem wi t h third- party 
antennas. This is because vJhen vendors subnl t their products for FCC... 

...can consider third-party rranagement and security products Bl uesocl<et , 
Ooi unt)i t ech, Ecutel, Funk, Net iU)t i on. Net Seai , Fteef Edge, Vernier and 
others. Finally, many organizations use st andar ds- based VPN gateways and 
VPN clients on al I . . . exi st i ng Ethernet equipment. For exanpl e, if you have 
lots of bandwidth and fairly advanced Ethernet switches , you night 
establish vm rel ess VLANs- maybe even a si ngl e wireless VLAN-to more 
easily manage addresses and to enforce security policies. The w rel ess 
VLAN can. . . 

...invest in some additional hardware and software. 

First, think about how you' re going to rmnage hundreds of access 
points . Configuration of APs in an enterprise environment needs to be 
automated. Some AP vendors, including Proximi design their... 
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W.AN SECURITY Qi The R se - There are no easy answers yet for ensuri ng 
authentication, privacy and authorization on wireless LANs, but the 
future looks a bit less scary. 

Dave M3l t a 
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access points and often present the available systems to you in a 
pick list. Some access points can be configured to suppress 
broadcast of SSI s. Ch systems configured in this manner, only clients that 
know. .. model , it is inarguably elegant. 

Hardwar e- based security solutions include offerings f r om Bl uesocket 
, Reef Edge and Vernier Networks. These start-up vendors sell products 
that involve the interconnection of your access points... 

...or more essential security features. For exanpl e, NASA's Advanced 
Super conput i ng □ vi si on has developed V\FG ( W rel ess Firewall Gateway ), 
built on CpenBSD and providing DHCP ser vi ces, SSL- based Wfeb authentication 
and customizable per -user... 

...restricting access to the W.AN based on a table of M'VC addresses stored 
on the access point . Some vendors provide rmnagerrent utilities that 
I et t hese l\^C ACLs be di st r 1 but ed to mil 1 1 pi e access poi nt s wi t hi n an 
organi zat 1 on. . . 

. . . COPANY NMJES ( □ ALOG GENERATED) : NASA ; RAD US ; School of I nf or mat 1 on 
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